Câu 373: CISA: Certified Information Systems Auditor

A new regulation requires organizations to report significant security incidents to the regulator within 24 hours of identification. Which of the following is the IS auditor's BEST recommendation to facilitate compliance with the regulation?

1. A. Include the requirement in the incident management response plan. — đáp án hiện tại
2. B. Enhance the alert functionality of the intrusion detection system (IDS).
3. C. Engage an external security incident response expert for incident handling.
4. D. Establish key performance indicators (KPIs) for timely identification of security incidents.